CancelDll
LoadDll
Behavioral task
behavioral1
Sample
13267bc05a8c906bd56c599ac7de0f021500cfe5e1961a9fb19f897074d5ef25.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
13267bc05a8c906bd56c599ac7de0f021500cfe5e1961a9fb19f897074d5ef25.dll
Resource
win10v2004-20220812-en
Target
13267bc05a8c906bd56c599ac7de0f021500cfe5e1961a9fb19f897074d5ef25
Size
67KB
MD5
6ee819f061466f0206d0fa571d28131c
SHA1
e1ad9bc1b7f65b3d0bb409ae3882de271f01c40f
SHA256
13267bc05a8c906bd56c599ac7de0f021500cfe5e1961a9fb19f897074d5ef25
SHA512
cbbaa2dac6ce1685e97681e2a7979f5822a476a9c892c01096fd818065a927d9cf14affabf1f9f111f1938ef57fecad25f532a0115857f758837af52268fce37
SSDEEP
1536:NomNZnI+CQSrN7ndYAe8c5e++V3zIfTkc+sd0nSsyjY3k0eA:NooC+CPWAe8c85V3sfTv+sdZ232A
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ